joomla/profiler

Release historycaution

The package has a long history and 16 releases, but it has had no registry release in the last 12 months, which raises a maintenance-cadence concern.

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance dependency; organization backing partly offsets the handoff risk.

Repo commit activitycaution

One commit was recorded in the last three months from one active maintainer, showing current activity but a very light recent pace.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.